Huawei Oceanstor 9000 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Huawei Oceanstor 9000 Firmware: 2 record(s), with affected versions and fixes.
cpe:2.3:o:huawei:oceanstor_9000_firmware

CVE-2020-8840 Critical · 9.8 CWE-502 Feb 10, 2020

Deserialization of Untrusted Data in Fasterxml Jackson-databind

FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

CVE-2016-3081 High · 8.1 KEV Urgent · 76 Public exploit CWE-77 Apr 26, 2016

Apache Struts Command Injection Vulnerability

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.